CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalog
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2013-3163 | Remote Code Execution via Memory Corruption in Microsoft Internet Explorer | — | 71% | KEV | — KEV |
| CVE-2017-7494 | Unauthenticated RCE in Samba via malicious shared library upload (SambaCry) | 9.8 | 99% | KEVRansomware | KEV |
| CVE-2021-30900 | Kernel Out-of-Bounds Write in Apple iOS, iPadOS, and macOS (Actively Exploited) | 7.8 | 5% | KEV | KEV |
| CVE-2022-22706 | Unprivileged Memory-Write Flaw in Arm Mali GPU Kernel Drivers | 7.8 | 1% | KEV | KEV |
| CVE-2022-3038 | Use-After-Free in Chromium Network Service Affects Chrome, Edge, Opera | 8.8 | 25% | KEVPoC | KEV |
| CVE-2022-38181 | Use-After-Free Vulnerability in Arm Mali GPU Kernel Driver (Bifrost/Valhall/Midgard) | 8.8 | 18% | KEVPoC ×2 | KEV |
| CVE-2022-39197 | XSS in Fortra Cobalt Strike Teamserver Enables Remote Code Execution | 6.1 | 44% | KEV | KEV |
| CVE-2022-42948 | HTML Injection RCE in Fortra (HelpSystems) Cobalt Strike UI | 9.8 | 3% | KEV | KEV |
| CVE-2023-0266 | Use-After-Free in Linux Kernel ALSA PCM Enables Local Privilege Escalation | 7.0 | 4% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
CISA has added nine flaws to its Known Exploited Vulnerabilities catalog, including bugs exploited by commercial spyware on mobile devices. U. S.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.